No Firewall

[Deleted User]

loaner wrote: »

Completely standalone home pc's are rare, anything web connected is at risk - all sorts of legitimate sites get infected, common sense is no protection.

http://www.google.co.uk/search?hl=en&q=asprox&btnG=Search&meta=

http://news.bbc.co.uk/1/hi/sci/tech/1468329.stm

Asprox was a great example of scaremongering. It was an SQL injection based attack, which was subsequently patched by all vendors affected?

Millionaire

anewhope wrote: »

Which servers?

Email servers have extremely militant anti virus scanners.

Upload servers will only accept a select few file types. What is uploaded cannot be complete source code, ie nothing that can be compiled and ran straight away.

It's perhaps an extreme example, but protecting seriously large investments is paramount, but my point still stands that common sense can over ride the need for antivirus software on a standalone home user machine.

Thanks, Like I said I was just curious what you had at work.

[Deleted User]

Millionaire wrote: »

Thanks, Like I said I was just curious what you had at work.

That's ok I can't go into specifics of what programs are used, but that's an overview of our framework. From what I know, any content to our upload servers are then transferred to another server that is completely isolated from the network and is then scanned before being deployed to the internal network so when I log in on a morning everything is available on the networked drives for another day at the salt mill.

[Deleted User]

loaner wrote: »

Just because a patch exists (sometimes months/years after the initial detection of a problem), doesn't mean it is applied, and home users or business users can't patch someone else's website. It exists, so how can that be scaremongering

Risk analysis, the crux of what computer security is based on.

[Deleted User]

loaner wrote: »

To do that, you have to understand the risk

Which takes us back to the point that you stated that running a computer with no security software would mean it would be riddled with viruses, malware and spyware which is what i've been demonstrating is a sweeping generalisation.

For those with no real IT literacy then yes, they will need it, but for those who are literate you can maintain a perfectly good system without it if you follow due diligence.

[Deleted User]

loaner wrote: »

Would no, could yes.

If you have a web enabled pc, and no control over the maintenance of a website you need to visit, you can get infected, and then can pass that infection at vast speed to everything on your network, and all your customers. The consequences are potentially serious for any organisation, especially commercial ones.

Any IT department worth it's salt will prevent anything malicious infecting their network. My point still stands.

[Deleted User]

loaner wrote: »

How much evidence do you need? If you can find this perfect IT department, I'd love to know who they are.

I think ours do an effective job

Back once again, the main cause of security issues is the pink fleshy thing that operates the keyboard. It's always been the case and I'm sure it will continue.